Client Credentials Grant
Machine-to-machine (M2M) authentication for confidential clients (RFC 6749 §4.4). Client authentication (client_secret_basic or RFC 7523 private_key_jwt) and access-token protection (Bearer or RFC 9449 DPoP) are independent choices exposed in one executable flow.
Client Credentials Grant
Machine-to-machine (M2M) authentication for confidential clients (RFC 6749 §4.4). Client authentication (client_secret_basic or RFC 7523 private_key_jwt) and access-token protection (Bearer or RFC 9449 DPoP) are independent choices exposed in one executable flow.
Machine-to-Machine
Sequence Diagram
Click any step for details
Request
Response
Redirect
Internal
Step-by-Step Breakdown
1
Prepare Token Request
Client → Authorization Server
2
Access Token Response
Authorization Server → Client
3
API Request
Client → Resource Server
Token Inspector
Specs for this flow
Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.